Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
File: Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft (raw, json)
Hash identifier: IoUsN4peBGQQbAGMfpvzsRVh7B4Zt4kOXU+7Hfgk2M8=
Subject key identifier: 8E:FF:0C:2A:9D:BB:75:73:81:54:C2:26:CC:4C:62:A2:E0:F0:1A:59
Authority key identifier: 43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF
Certificate issuer: /CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
Certificate serial: 019D9A06D8B801F7E43D1E3824C4839B8B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
Manifest number: 0D4E
Signing time: Fri 17 Apr 2026 06:00:33 +0000
Manifest this update: Fri 17 Apr 2026 06:00:33 +0000
Manifest next update: Sat 18 Apr 2026 06:00:33 +0000
Files and hashes: 1: JMsELryrC71hTAcMzLYAc7CKRKk.roa (hash: rdsIPfGSMD6EsO8NTErhSi4I9C7O//GGQnV/svCoWHA=)
2: Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl (hash: 3xmcKcLX9YzVXnV4e5Pu8M3x0kFynSTL4WncFcwzHLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:d8:b8:01:f7:e4:3d:1e:38:24:c4:83:9b:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
Validity
Not Before: Apr 17 06:00:33 2026 GMT
Not After : Apr 18 06:00:33 2026 GMT
Subject: CN=8eff0c2a9dbb75738154c226cc4c62a2e0f01a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:d9:5c:a9:a7:27:f8:b6:55:17:80:0d:cf:
e7:76:3c:b3:85:6e:1a:ba:ba:39:90:68:0c:89:77:
1d:75:c1:43:be:f6:e9:3e:d0:bd:5a:ff:3f:e3:5e:
65:4f:32:36:b7:60:69:f6:d9:81:c9:c5:79:ae:f2:
b5:13:58:ed:bf:cf:bb:28:59:19:cf:58:d6:f0:ef:
ac:65:03:59:17:0d:78:71:69:aa:2e:ea:05:da:88:
fe:f3:74:ea:62:f0:9c:b7:4b:7f:dd:dd:65:c3:f8:
b4:46:ba:a8:26:66:a8:5c:81:f3:8a:29:2e:d9:72:
ab:22:39:43:04:cb:e6:d5:72:a8:3c:ac:75:87:6f:
fc:14:f4:61:b2:c3:04:f6:2f:58:4f:71:71:c3:c5:
b4:b5:83:b5:a5:cf:f0:f6:01:a2:83:7f:6b:06:fc:
5c:6e:25:8d:29:49:37:3b:3f:a0:f9:78:a8:93:87:
51:fb:eb:6a:16:b2:cb:e6:96:3c:4c:34:9a:c1:d2:
17:90:82:68:ed:65:7f:16:46:e7:c5:d2:ff:47:03:
65:1a:a5:6a:79:13:99:68:36:09:8c:23:05:c0:78:
b4:b9:9b:33:f5:ef:3e:3d:b0:f7:a0:1d:a6:c7:4e:
ea:26:a2:e7:68:2d:b5:02:a6:5f:5c:e8:b2:71:2e:
25:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FF:0C:2A:9D:BB:75:73:81:54:C2:26:CC:4C:62:A2:E0:F0:1A:59
X509v3 Authority Key Identifier:
keyid:43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a3:21:1b:05:1d:05:e7:6b:a0:9d:41:2d:4a:72:41:7f:92:
6b:d6:76:24:22:91:0f:70:a8:75:cd:ba:61:61:d2:b5:7a:6c:
3f:6c:e9:cb:26:c9:cb:4f:95:75:18:73:7b:4c:23:4d:62:fd:
7c:a3:29:7c:3a:ae:db:b3:d1:41:7d:ac:b0:59:a8:6e:16:e2:
88:3a:d0:83:98:21:3e:da:68:2a:79:ec:9e:90:67:78:4a:cf:
49:57:b9:d3:19:4e:b1:ae:eb:c3:60:14:25:55:21:5d:57:37:
ec:7f:5d:99:b2:e6:da:d5:d4:f3:52:d4:72:27:db:bb:2f:bd:
ec:8c:3c:bf:02:aa:94:33:8a:84:fa:7e:12:c1:b8:0d:2a:d2:
d9:3f:59:26:5c:f7:4e:fd:93:81:db:ae:63:5a:45:e3:cd:c7:
6b:ad:3f:33:ed:89:a2:2c:2c:4a:33:89:37:0a:bd:5a:67:8e:
94:df:de:97:78:f0:b5:b0:d7:a2:f9:7b:e5:4e:af:2f:18:75:
a6:99:39:0b:ef:71:4d:e9:2e:4b:00:1a:28:69:6d:7d:bb:4b:
37:92:37:0d:6e:ed:ef:2e:25:ff:ee:bf:c8:0f:43:41:ae:98:
27:1d:b0:ba:94:ef:f1:66:b3:4a:3f:ed:61:bd:1a:4a:2c:ae:
10:36:0a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:13 2026 by rpki-client